User:Gerald K Walker

Gerald K. Walker, IT Consultant

Professional Background HIGHLIGHTS

IT Consultant MBA, BS, CISSP, CISA, MCT, MCSE

Gerald brings strong experience in IT Governance and IT Risk Assessment to any project. Professional expertise includes IT Governance, General Controls, Security Management, Network Security, Application Security, and Risk Assessments. Prior to forming, Interactive America, Inc. Gerald was employed as an Information Technology Auditor at General Electric where he assisted in the Section 404 readiness process, designed and developing test of effectiveness playbooks utilizing IT Audit continuous data mining techniques, and audit process automation. In his role as IT Auditor, Gerald supported the KPMG Audit staff through TOE evidence collection process and developed control playbooks with detailed systematic evidence collection and monitoring procedures. He executed entitlement /access reviews for Corporate Treasury domain, operation systems, database, and applications environment, interviewed, and collaborated with application owners to ensure test of control design is also effective.

Additionally, Gerald provided weekly reports to IT – Controller as to the Success and or failure of the Sarbanes – Oxley Projects Previously at The Secura Group, LECG, Gerald was employed as head of IT-Risk Management Consulting Services. The primary objective of the IT-Risk Management Services was to assist Clients with IT needs in the following areas: IT policy, methodology, development of standards, strategy, education, process improvement, metrics, reporting, and communications.

Gerald’s strong experience and skill sets enabled him to design, implement, and manage all areas of compliance for Client bank, including bank policies and compliance with federal and state regulations and prepare reports on exceptions and present reports to management. He tracked progress of implementation and supported the process, advised Client bank staff on regulatory Issues, designed, documented, and implemented compliance policies and procedures and provided training for the bank's Anti-Money Laundering Officer, BSA Officer, OFAC Officer, CRA Officer, and Privacy Officer.

In addition to all this, he acted as liaison with regulators to coordinate regulatory examinations, interpret requests for information, coordinated meetings/document productions responsive to such requests, and communicated with regulators regarding information requests and the Firm's response to such requests As a Compliance Officer at CitiGroup.

Gerald ensured that Citigroup Technology Infrastructure guidelines are current by conducting pre-audit and audit advisory activities as outlined in ITIL standard framework, including IT-Risk Management Advisory Services, Operational Risk & SOX404 (Sarbanes-Oxley) consulting services within the Application Operating Systems Services (A/OSS), and Mainframe Services of Citigroup. Responsibilities included developing and Maintaining Process Control Manuals (PCM) with workflow analysis for the following disciplines, Architecture, Contracting and Outsourcing, Internet Management, Resource Management, Continuity of Business, Change Management, Problem Management, Software Management, Records Management and Information Security Additional tasks included the implementation of gap-analysis methodologies involving GCC, and Key Control procedures within Capital Markets and Global Storage .